Priority LOW 38
The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02867 · Published 2016-01-27 · Will not fix CWE-20
Priority LOW 38
The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02736 · Published 2016-01-27 · Will not fix CWE-20
Priority LOW 37
A flaw was found in privoxy before 3.0.32.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01953 · Published 2021-03-09 · No fix listed CWE-119
Priority LOW 37
A flaw was found in privoxy before 3.0.32.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01953 · Published 2021-03-09 · No fix listed CWE-119
Priority LOW 37
A flaw was found in privoxy before 3.0.32.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01915 · Published 2021-03-09 · No fix listed CWE-476
Priority LOW 37
A flaw was found in privoxy before 3.0.32.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01953 · Published 2021-03-09 · No fix listed CWE-20
Priority LOW 37
A flaw was found in privoxy before 3.0.32.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02108 · Published 2021-03-09 · No fix listed CWE-617
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.31.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02276 · Published 2021-03-25 · No fix listed CWE-400
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02252 · Published 2021-03-25 · No fix listed CWE-401
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02024 · Published 2021-03-25 · No fix listed CWE-401
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02024 · Published 2021-03-25 · No fix listed CWE-401
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02147 · Published 2021-03-25 · No fix listed CWE-401
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02355 · Published 2021-03-25 · No fix listed CWE-401
Priority LOW 37
A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01897 · Published 2021-05-25 · Fixed in 3.0.29 CWE-401
Priority LOW 37
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02355 · Published 2021-03-25 · No fix listed CWE-401
Priority LOW 37
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconfirmed use-after-free…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02412 · Published 2015-02-10 · Will not fix
Priority LOW 36
A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01439 · Published 2021-12-23 · No fix listed CWE-401
Priority LOW 36
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01383 · Published 2021-12-23 · No fix listed CWE-401
Priority LOW 36
A flaw was found in Privoxy in versions before 3.0.31.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01371 · Published 2021-03-25 · No fix listed CWE-617
Priority LOW 36
A flaw was found in Privoxy in versions before 3.0.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01571 · Published 2021-03-25 · No fix listed CWE-476
Priority LOW 35
A memory leak vulnerability was found in Privoxy when handling errors.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01267 · Published 2021-12-23 · No fix listed CWE-401
Priority LOW 34
UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00409 · Published 2020-01-24 · No fix listed CWE-59
Priority LOW 34
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04632 · Published 2013-03-11 · Will not fix CWE-20
Priority LOW 29
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00796 · Published 2021-12-23 · No fix listed CWE-79
Priority LOW 29
jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03397 · Published 2015-02-03 · Will not fix CWE-20
Load more
THREATIST.IORead the docs